CMD Runs a shell command. The CommandDescription parameter is a string that contains the full, physical path of the shell program, followed by any command-line parameters separated by spaces. If the full path is not specified, the Web server searches the system path. This directive is disabled by default because it poses a security risk to your Web site; for example, a user could run the format command to erase your hard disk. To enable it, add the SSIEnableCmdDirective entry to the registry and set the value to TRUE. For general information on using the registry, see Registry.

SSIEnableCmdDirective REG_DWORD Range: 0, 1 Default:0 (disabled) To execute shell commands, the #exec cmd directive of server-side includes is used. Security-conscious sites may wish to disable the #exec cmd directive by setting this value to 0 as an added security precaution, especially when untrusted parties are allowed to place files on the server. This value does not exist in the registry by default; to allow this directive to execute shell commands, you must first create the value and set it to 1.